Solved

What's the difference between Domain Controller Security Settings and Domain Security Settings?

Posted on 2007-12-04
6
1,954 Views
Last Modified: 2012-06-27
What's the difference between Domain Controller Security Settings and Domain Security Settings?
0
Comment
Question by:AnimatorOne
6 Comments
 
LVL 12

Accepted Solution

by:
bhnmi earned 300 total points
ID: 20406816
One is for the Domain Controllers and the other is domain wide.
0
 
LVL 38

Assisted Solution

by:Shift-3
Shift-3 earned 200 total points
ID: 20406851
Domain Security Settings affect every computer in the domain.  Domain Controller Security Settings only affect machines in the Domain Controllers OU.

Keep in mind that Account Policies (password, lockout, and kerberos settings) must be set at the domain level.  They have no effect if set on a site or OU.

Group Policy is a big and complicated topic.  Here is an introduction:
http://www.microsoft.com/windowsserver2003/techinfo/overview/gpintro.mspx
0
 
LVL 38

Expert Comment

by:ChiefIT
ID: 20406867
I am not sure where you see the two, meaning Domain Security and Domain Controller Security, to draft this question? But, it sounds like you are trying to figure out the Domain controller's settings in comparison to the Default Domain Group policy settings.

The domain controller's settings should be one domain controller, when the domain security settings will interact with all domain controllers and clients on your domain.
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 38

Expert Comment

by:ChiefIT
ID: 20406871
Looks like we were all drafting the answer at the same time. Sorry about the redundancy.
0
 

Author Comment

by:AnimatorOne
ID: 20406877
So if you set a DC Permision, it will replicate to other DCs only and if you set the Domain permission it goes out to every PC, Server etc on the domain?
0
 

Author Closing Comment

by:AnimatorOne
ID: 31412695
Thank you!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question